Advisory Catalog

Mistune has a ReDoS in LINK_TITLE_RE that allows denial of service via crafted Markdown input

Rucio has SQL Injection in FilterEngine PostgreSQL Query Builder via DID Search API

Rucio has SQL Injection in FilterEngine Oracle JSON Path via DID Search API

Keylime has a hardcoded attestation challenge nonce that allows replay attacks

Paramiko rsakey.py allows the SHA-1 algorithm

vLLM Vulnerable to Remote DoS via Special-Token Placeholders

ciguard: Web UI is missing HTTP defence-in-depth headers

ciguard: discover_pipeline_files follows symlinks out of scan root

ciguard: Container image runs as root (no USER directive)

ciguard: SCA HTTP client reads response body without size cap

PyLoad vulnerable to Path Traversal via Package Folder Name in set_package_data

changedetection.io has an Arbitrary Local File Read via a crafted backup restore

PyLoad Vulnerable to Path Traversal via Package Folder Name

Twisted has a Denial of Service (DoS) in twisted.names via Crafted DNS Compression Pointer Chains

Ethyca Fides has a Privacy Request Identity Verification Bypass Vulnerability via Duplicate Detection

JupyterLab has an Extension Manager API/GUI Policy Discrepancy, allowing 3rd party (malicious) extensions install via POST request

wireshark-mcp vulnerable to arbitrary file write via export_objects when WIRESHARK_MCP_ALLOWED_DIRS is not configured

django-s3file is vulnerable to relative path traversal

requests-hardened is Vulnerable to Server-Side Request Forgery

OpenStack Ironic has an Incorrect Resource Transfer Between Spheres

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. In versions 6.6.0 through 6.9.12, there is a privilege escalation vulnerability that can be exploited by unauthenticated attackers to query the API as any existing user, including the default admin a

Microdot has HTTP response splitting in Response.set_cookie()

Langflow Knowledge Bases API is Vulnerable to Path Traversal

FireFighter has unauthenticated SSRF in its Raid jira_bot endpoint that allows IAM credential theft

JupyterHub has cross-origin form POSTs bypass XSRF (CWE-352)

edx-enterprise has SSRF via SAML metadata URL in sync_provider_data endpoint

Langchain-Chatchat Uses Insufficiently Random Values

OpenStack Horizon has Incorrect Behavior Order

Jupyter Server's Authentication Cookies Remain Valid After Password Reset and Server Restart

Jupyter Server has a CORS Origin Validation Bypass via `re.match()` in `allow_origin_pat`

Jupyter Server: Path Traversal via incorrect startswith() root directory check allows access to sibling directories

Langchain-Chatchat has a Race Condition in its OpenAI-Compatible File Upload API

Langchain-Chatchat Uses a Broken or Risky Cryptographic Algorithm

Django Uses Cache Containing Sensitive Information

Django has an Improper Handling of Length Parameter Inconsistency

Django Uses Persistent Cookies Containing Sensitive Information

Jupyter Server has an open redirection vulnerability in `next` query parameter

ogham-mcp had credentials embedded in published PyPI sdists -- Neon postgres URLs and Voyage API key

pyload-ng: non-admin SETTINGS users can redirect all outbound traffic through an attacker-controlled proxy via unrestricted `proxy.*` config (incomplete fix for CVE-2026-33509 / -35463 / -35464 / -35586)

pyload-ng: non-admin SETTINGS users can disable outbound TLS peer verification via unrestricted `ssl_verify` config (incomplete fix for CVE-2026-33509 / -35463 / -35464 / -35586)

ArchiveBox Vulnerable to RCE via unvalidated per-crawl config overrides in AddView

changedetection.io project has an XXE vulnerability

Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow)

Pillow has a PDF Parsing Trailer Infinite Loop (DoS)